CVE-2026-7133: code-projects Online Lot Reservation System activity.php unrestricted upload
A vulnerability was determined in code-projects Online Lot Reservation System 1.0. This impacts an unknown function of the file /activity.php. This manipulation of the argument directory causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7133?
CVE-2026-7133 has been classified as a high severity vulnerability due to its potential for unrestricted file uploads.
How do I fix CVE-2026-7133?
To fix CVE-2026-7133, you should implement proper input validation and restrict the types of files that can be uploaded in activity.php.
What impact does CVE-2026-7133 have on the system?
CVE-2026-7133 allows attackers to upload arbitrary files, which could lead to remote code execution and compromise the system.
Is CVE-2026-7133 exploitable remotely?
Yes, CVE-2026-7133 is exploitable remotely since it involves unrestricted file uploads via a web interface.
Which software version is affected by CVE-2026-7133?
CVE-2026-7133 specifically affects version 1.0 of the Code-projects Online Lot Reservation System.